last executing test programs: 3m50.291593599s ago: executing program 4 (id=15): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0, r0}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'sha384-generic\x00'}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000380)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c90010000c000500ff3f080000", @ANYRESOCT=r0], 0x15) set_mempolicy(0x0, 0x0, 0x0) 3m48.966506241s ago: executing program 4 (id=19): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xab}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xfd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}]}, 0x40}, 0x1, 0x7}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000310000000500350000000000050033000004000005003600000000000800", @ANYRES32=r9], 0x34}}, 0x0) 3m48.142744387s ago: executing program 4 (id=24): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 3m44.799511892s ago: executing program 4 (id=26): syz_clone(0x4010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m41.935507984s ago: executing program 4 (id=30): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e45", 0x54}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20038) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000018c0)={0x0, 0xf7, "dc61bf704fa90d3d39a09217a261df4f85faf24cfea1836b1972d40bc18709bed3ab24c656da1b839e1220a5592c6b757066f1a67c86309ece97dbf25e38a8a83a79d6a6e16f380b9c5ab6666522a1320693b2984cc320e6f764158a49f9b50f9a18c3cb881dd79a44e5639378e6de22505e3cfc651287f6a1333b5191289ea8a8d13baed6567400818ef0aaba28936aed494d7a35747687429134bb5cb2fe8ae63b77305a11cf3695106dd43182bb6c9a9fd5ab95cb6c1526c7139cc2dc5e1863fddad7d0a4a44adcfcc7db81e863274e901d786db3078e5213f6974f84276f0e3e21374bca6ce8a981e713e938ec930e728c20686930"}, &(0x7f0000000400)=0xff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000440)={r5}, &(0x7f0000000480)=0x8) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$sock(r6, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4004001) sendto$packet(r6, &(0x7f00000001c0)="43e1a10c6752642580040a1ee5b154af9bd054bd27339a01b067a22f86f750d0bc6a599830ff21ba53f47cb3902a33a71f0081e91ef5ac4d4a083645336f1bc8accf1cb4fb8f23774ab01515108a802f30150af9df44b2cbe9cbe79cfe962ca82ade21b15517e17afc06b4f1f8a70c807f1e780306722a8ab72c649f570b0d71ea60960e6790ce5c58e3ee", 0x8b, 0x4008010, &(0x7f0000000280)={0x11, 0x18}, 0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x12, 0x9, &(0x7f0000001180)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000008500000039000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe7b, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "4e000000f000", "13f4036c5528f5e05dc70a4a0a0e4289", "27d5e718", "00ef8fc78b80988b"}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x3, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000100), 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) 3m39.217876601s ago: executing program 4 (id=39): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000440)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) 3m23.11789167s ago: executing program 32 (id=39): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000440)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) 2m25.838846271s ago: executing program 0 (id=187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x640, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x5e8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0x88a, 0x0, {0x60, 0x2, 0x200, 0x0, 0x1ff, 0x200}, {0x9, 0x2, 0x1, 0x70ed, 0x1ff, 0x6}, 0x4, 0xffffff80, 0xae}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x401, 0x3, 0x80, 0x8, 0x9, 0x1db3669e, 0x9, 0xb, 0x400, 0x1, 0x8, 0x5, 0x118c, 0x2, 0x8, 0x5, 0x88, 0x4e5c290f, 0x81, 0x6, 0x1c000, 0xfffffffc, 0x5, 0x200, 0x0, 0x2, 0x4, 0x2000000, 0xb, 0xd, 0xb0000, 0x8, 0x904, 0x3, 0x200, 0x4, 0xff, 0x7, 0x2, 0x84d3, 0x7, 0x3, 0xf6, 0x1, 0x8, 0x1, 0x3, 0x3766, 0xffff57ba, 0x8, 0x7, 0x5c680, 0x1, 0x3, 0x800, 0x4, 0x9, 0x2982, 0xf9a, 0x200, 0x8, 0x10, 0x2, 0x5, 0x5, 0x4, 0x2, 0x10, 0x200, 0x3, 0x0, 0x0, 0x6, 0x8000, 0xe2, 0x0, 0x9, 0x3, 0xfffffff9, 0x4488, 0x28, 0x1, 0x8d12, 0x4, 0x8, 0xf7, 0x76e, 0x4, 0x5, 0x55fa, 0x7, 0xe, 0x1f8, 0xfffffffb, 0x800, 0x0, 0x35c6, 0x5, 0x5, 0x37f3, 0x2, 0x5, 0xf, 0xffff, 0x4, 0x50, 0x2, 0x7ce, 0x4, 0x9, 0xbc9, 0xf35b, 0xdfd6, 0x47, 0x3, 0x2e1, 0x2, 0x10, 0x7, 0x14, 0x8, 0x7, 0x7f, 0x2, 0x4, 0x8, 0xe7, 0xfe000000, 0x8002, 0xc, 0xba4, 0x7, 0x8, 0x7, 0x4255, 0x9ee8, 0x6, 0x100, 0x6, 0xa7, 0xffd, 0x7ff, 0xfff, 0x3ff, 0x5, 0x3, 0x3, 0x5, 0x9, 0x36, 0x80000000, 0xee, 0x8b, 0x6ff, 0x5, 0x3, 0x0, 0x383, 0x6, 0x8, 0x6, 0xffffffff, 0x17, 0xe3, 0x3, 0x8e, 0x7, 0x1, 0x4, 0x69, 0x3, 0xfffffffc, 0x6, 0xfffffff0, 0x40, 0x339, 0x9, 0x8, 0x2, 0x6, 0x5, 0x1, 0x1, 0x645f, 0x200, 0x800, 0x2, 0x6641, 0x8000, 0xfffffffb, 0x9, 0x3, 0x9, 0x74b4, 0x1ff, 0x8, 0x4, 0x0, 0x100, 0x3, 0x0, 0x8, 0x4, 0x2, 0x3128, 0xe, 0x4, 0xfffffffe, 0x8, 0x4, 0x1, 0x7, 0x7, 0x4, 0x8000, 0xf263, 0xd3e2, 0x2, 0x1000, 0x9, 0x7, 0x62, 0x8, 0x5, 0x0, 0xc00, 0x2, 0x7, 0x1, 0xffff0001, 0x97a5, 0x4, 0x5, 0x7, 0x6, 0x8, 0x7fff, 0x0, 0x6, 0xfffffffe, 0x1, 0x3, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x5, 0x1, 0xffffffff, 0x5, 0xfffffffb, 0x7f, 0x7]}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x180, 0x6, [@m_ife={0x110, 0xb, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xc7, 0x0, 0x2, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x7ff}}}]}, {0x2d, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68bb870c2d11809108"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x640}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2m23.463910564s ago: executing program 0 (id=189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/61) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000024b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00007d5000/0x3000)=nil) pipe(&(0x7f0000000000)) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x1fe}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 2m14.052993031s ago: executing program 0 (id=190): socket$kcm(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m2.58291284s ago: executing program 0 (id=198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002dc0)=@delchain={0x640, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x5e8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x454, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0x88a, 0x0, {0x60, 0x2, 0x200, 0x0, 0x1ff, 0x200}, {0x9, 0x2, 0x1, 0x70ed, 0x1ff, 0x6}, 0x4, 0xffffff80, 0xae}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x401, 0x3, 0x80, 0x8, 0x9, 0x1db3669e, 0x9, 0xb, 0x400, 0x1, 0x8, 0x5, 0x118c, 0x2, 0x8, 0x5, 0x88, 0x4e5c290f, 0x81, 0x6, 0x1c000, 0xfffffffc, 0x5, 0x200, 0x0, 0x2, 0x4, 0x2000000, 0xb, 0xd, 0xb0000, 0x8, 0x904, 0x3, 0x200, 0x4, 0xff, 0x7, 0x2, 0x84d3, 0x7, 0x3, 0xf6, 0x1, 0x8, 0x1, 0x3, 0x3766, 0xffff57ba, 0x8, 0x7, 0x5c680, 0x1, 0x3, 0x800, 0x4, 0x9, 0x2982, 0xf9a, 0x200, 0x8, 0x10, 0x2, 0x5, 0x5, 0x4, 0x2, 0x10, 0x200, 0x3, 0x0, 0x0, 0x6, 0x8000, 0xe2, 0x0, 0x9, 0x3, 0xfffffff9, 0x4488, 0x28, 0x1, 0x8d12, 0x4, 0x8, 0xf7, 0x76e, 0x4, 0x5, 0x55fa, 0x7, 0xe, 0x1f8, 0xfffffffb, 0x800, 0x0, 0x35c6, 0x5, 0x5, 0x37f3, 0x2, 0x5, 0xf, 0xffff, 0x4, 0x50, 0x2, 0x7ce, 0x4, 0x9, 0xbc9, 0xf35b, 0xdfd6, 0x47, 0x3, 0x2e1, 0x2, 0x10, 0x7, 0x14, 0x8, 0x7, 0x7f, 0x2, 0x4, 0x8, 0xe7, 0xfe000000, 0x8002, 0xc, 0xba4, 0x7, 0x8, 0x7, 0x4255, 0x9ee8, 0x6, 0x100, 0x6, 0xa7, 0xffd, 0x7ff, 0xfff, 0x3ff, 0x5, 0x3, 0x3, 0x5, 0x9, 0x36, 0x80000000, 0xee, 0x8b, 0x6ff, 0x5, 0x3, 0x0, 0x383, 0x6, 0x8, 0x6, 0xffffffff, 0x17, 0xe3, 0x3, 0x8e, 0x7, 0x1, 0x4, 0x69, 0x3, 0xfffffffc, 0x6, 0xfffffff0, 0x40, 0x339, 0x9, 0x8, 0x2, 0x6, 0x5, 0x1, 0x1, 0x645f, 0x200, 0x800, 0x2, 0x6641, 0x8000, 0xfffffffb, 0x9, 0x3, 0x9, 0x74b4, 0x1ff, 0x8, 0x4, 0x0, 0x100, 0x3, 0x0, 0x8, 0x4, 0x2, 0x3128, 0xe, 0x4, 0xfffffffe, 0x8, 0x4, 0x1, 0x7, 0x7, 0x4, 0x8000, 0xf263, 0xd3e2, 0x2, 0x1000, 0x9, 0x7, 0x62, 0x8, 0x5, 0x0, 0xc00, 0x2, 0x7, 0x1, 0xffff0001, 0x97a5, 0x4, 0x5, 0x7, 0x6, 0x8, 0x7fff, 0x0, 0x6, 0xfffffffe, 0x1, 0x3, 0x0, 0x4, 0x6, 0x7fffffff, 0x8, 0x5, 0x1, 0xffffffff, 0x5, 0xfffffffb, 0x7f, 0x7]}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x180, 0x6, [@m_ife={0x110, 0xb, 0x0, 0x0, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xc7, 0x0, 0x2, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x9, 0x7ff}}}]}, {0x2d, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68bb870c2d11809108"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x640}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1m56.685537021s ago: executing program 0 (id=202): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000540)=@ethtool_coalesce={0x7, 0xfffffffc, 0x0, 0x0, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000980)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000009c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000001c0)={0x20, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xffffffffffff638c}) 1m53.198541582s ago: executing program 0 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd=r3, 0x0, 0x0, 0x9, 0x18, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m38.003862484s ago: executing program 33 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd=r3, 0x0, 0x0, 0x9, 0x18, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 16.54949365s ago: executing program 2 (id=326): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x8, 0x0) 15.183246846s ago: executing program 2 (id=327): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f00)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r2, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4048c10}, 0x40c0) prlimit64(0x0, 0x3, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000280)=[r9], &(0x7f00000002c0)}) 12.898721192s ago: executing program 2 (id=330): socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x1f8, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc4, @loopback, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe410}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3a8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x1f8}}, 0x8000) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x7004}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 11.421686939s ago: executing program 2 (id=335): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x6, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc2, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000004c0)={0x2, 0x20ad, 0x780000, 0x1200, 0x10000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) 10.187641659s ago: executing program 2 (id=338): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x101d0) 9.962484199s ago: executing program 2 (id=339): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xa1, 0x9, 0x40, @local, @empty, 0x10, 0x20, 0xe, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$binfmt_register(0xffffffffffffffff, &(0x7f0000001280)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xf0, 0x3a, 'datacow', 0x3a, '\\-%#!\\\\\'', 0x3a, './file0', 0x3a, [0x50]}, 0x37) getpid() syz_open_dev$dri(0x0, 0xd21, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0xa, 0x801, 0x84) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000050000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 6.599291137s ago: executing program 3 (id=346): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x6, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc2, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) 6.09119582s ago: executing program 1 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)={{0x1, 0x0, 0x80, {0x10000, 0x8080000}}, "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", "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"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59104"]) 5.082410439s ago: executing program 1 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x48c1c521}], 0x1, 0x2, 0x0) r2 = syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x1}, &(0x7f0000000100), &(0x7f0000000140)) r3 = epoll_create(0xaf2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) 3.943522127s ago: executing program 3 (id=349): ioprio_set$pid(0x2, 0x0, 0x0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) write$char_usb(r0, &(0x7f00000001c0), 0x0) r1 = socket(0x15, 0x4, 0xc4) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 3.716890965s ago: executing program 1 (id=350): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = msgget(0x1, 0x653) msgrcv(0x0, &(0x7f0000000500)={0x0, ""/84}, 0x5c, 0x2, 0x800) syz_emit_vhci(&(0x7f0000000600)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x2, 0x800, 0x3ff, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0xb, 0x2}, {0xfffa}}, @l2cap_conf_rsp={{0x5, 0x0, 0x11}, {0x40, 0x7, 0x8000, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x4, 0x8, 0xc, 0xd8a6}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x79, 0x2}, {0x3}}, @l2cap_disconn_rsp={{0x7, 0x5, 0x4}, {0x6, 0xfe01}}]}}, 0x3e) socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x400, 0x5) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0xfe, 0xf37, 0x4}, &(0x7f0000000700)=0x10) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000800)={0x5, 0x9, 0x1, 0x684a, 0x101, 0x8, 0x3, 0xd4}, 0x0, &(0x7f0000000880)={0x8000000000000001, 0x4, 0xbf52, 0x7, 0x100000000, 0x6, 0x9, 0x4}, &(0x7f0000000900)={r1, r2+10000000}, &(0x7f0000000980)={&(0x7f0000000940)={[0x4]}, 0x8}) msgctl$MSG_INFO(r0, 0xc, &(0x7f00000009c0)=""/102) 2.683034963s ago: executing program 1 (id=351): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) 2.578829325s ago: executing program 3 (id=352): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x521000, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) modify_ldt$write2(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x2}}}, 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.475481161s ago: executing program 3 (id=353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0x39, 0xc, "fbbcbd533ef0ed05c319aa8280a7210564e212dfa4c3f83cc89942032dcb75feef7639cc3c39dbe826d36511e66ffc774a55606604"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62385321}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9a3d419}]}]}, @NFT_MSG_NEWFLOWTABLE={0x220, 0x16, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x184, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_QUEUE_SREG_QNUM={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x138, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x12c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x128, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "0888e43af42b18d683c3b03f1a248343fea6ce8f9666b054fe789effb99997d81cdd04b2ab358e4b2ee71cbf73901f8902b6e6b716070e97f35a76246294ef37d07c28b48a3e6f69462dac0f2577b1d3586fdf2ee2c35f3206bacdcd95e33bd0e7"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9, 0x1, "b93873f0e5"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x4f0}, 0x1, 0x0, 0x0, 0x24008005}, 0x4040005) 1.410594097s ago: executing program 1 (id=354): socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, 0x0, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r1, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x1f8, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xc4, @loopback, 0xc}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe410}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3a8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x99}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x1f8}}, 0x8000) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x44, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x7004}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 699.11755ms ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r1, 0x701, 0x0, 0x0, {0x34}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) 610.175981ms ago: executing program 1 (id=356): r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000007a00), 0x0, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400"], 0x70}}, 0x0) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000085}, 0x40) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto$inet6(r1, &(0x7f0000007bc0)="21881be8c20f43ee5d623903ecc6bfa4b639ea09f3fc38e3e45374489e4a39481434dd4e7bff4f89df07653427808d898fd4eb09a443022363d5ee3d5b89db367ff61cd6bc7ca362dcc71d9350f51e4836faf81476bc0c5874ab077c92f7db32424f0f506d80944aebe8bd6c4c3bec", 0x6f, 0x8001, &(0x7f0000007540)={0xa, 0x4e20, 0x40, @loopback, 0x5}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0xffffffff, @local, 0x8}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000001080)={r6}, &(0x7f0000001140)=0x8) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000280)={0x2, &(0x7f00000000c0)=[{0x40, 0x8}, {0x6, 0x0, 0x20, 0x4000}]}) write$ppp(r4, &(0x7f0000000480)='\x00\x00', 0x2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="ff00000000000000", @ANYRES64=0x3], 0x10) close(r1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x300, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000200)=ANY=[], 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 0s ago: executing program 3 (id=357): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x6, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xc2, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x10d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 208.522087][ T5777] cgroup: Unknown subsys name 'net' [ 208.756380][ T5777] cgroup: Unknown subsys name 'cpuset' [ 208.772828][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.351623][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.358383][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.779808][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 270.057908][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.067688][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.077159][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.088622][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.098331][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.107320][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.116528][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.130164][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.141036][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.150359][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.160150][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.168968][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.178067][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.179019][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.200061][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.202001][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.213115][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.223664][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.224298][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.233385][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.244901][ T5808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.255885][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.257138][ T5808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.264236][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.273911][ T5808] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.282969][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.287076][ T5808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.295144][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.309154][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.323432][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.000806][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 272.123481][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 272.305006][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 272.324919][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 272.370792][ T5805] Bluetooth: hci0: command tx timeout [ 272.451326][ T5805] Bluetooth: hci4: command tx timeout [ 272.457156][ T5805] Bluetooth: hci2: command tx timeout [ 272.465542][ T5796] Bluetooth: hci1: command tx timeout [ 272.467586][ T5808] Bluetooth: hci3: command tx timeout [ 272.671219][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 273.445037][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.453188][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.461327][ T5797] bridge_slave_0: entered allmulticast mode [ 273.471095][ T5797] bridge_slave_0: entered promiscuous mode [ 273.573138][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.581260][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.589253][ T5797] bridge_slave_1: entered allmulticast mode [ 273.598950][ T5797] bridge_slave_1: entered promiscuous mode [ 273.739140][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.748659][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.756732][ T5795] bridge_slave_0: entered allmulticast mode [ 273.766233][ T5795] bridge_slave_0: entered promiscuous mode [ 273.813829][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.821830][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.829646][ T5793] bridge_slave_0: entered allmulticast mode [ 273.840016][ T5793] bridge_slave_0: entered promiscuous mode [ 274.013424][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.021432][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.029206][ T5795] bridge_slave_1: entered allmulticast mode [ 274.038762][ T5795] bridge_slave_1: entered promiscuous mode [ 274.087110][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.096127][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.104536][ T5793] bridge_slave_1: entered allmulticast mode [ 274.114088][ T5793] bridge_slave_1: entered promiscuous mode [ 274.164011][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.172034][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.179705][ T5794] bridge_slave_0: entered allmulticast mode [ 274.189121][ T5794] bridge_slave_0: entered promiscuous mode [ 274.245656][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.325631][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.335237][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.343240][ T5801] bridge_slave_0: entered allmulticast mode [ 274.352777][ T5801] bridge_slave_0: entered promiscuous mode [ 274.366223][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.374165][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.382078][ T5794] bridge_slave_1: entered allmulticast mode [ 274.391440][ T5794] bridge_slave_1: entered promiscuous mode [ 274.401161][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.408918][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.417181][ T5801] bridge_slave_1: entered allmulticast mode [ 274.426674][ T5801] bridge_slave_1: entered promiscuous mode [ 274.446230][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.464375][ T5808] Bluetooth: hci0: command tx timeout [ 274.503603][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.530731][ T5808] Bluetooth: hci1: command tx timeout [ 274.536783][ T5808] Bluetooth: hci3: command tx timeout [ 274.542847][ T52] Bluetooth: hci2: command tx timeout [ 274.548647][ T52] Bluetooth: hci4: command tx timeout [ 274.574137][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.698426][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.718032][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.737103][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.870245][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.922639][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.976514][ T5797] team0: Port device team_slave_0 added [ 274.992355][ T5793] team0: Port device team_slave_0 added [ 275.006126][ T5797] team0: Port device team_slave_1 added [ 275.056543][ T5795] team0: Port device team_slave_0 added [ 275.107998][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.125478][ T5793] team0: Port device team_slave_1 added [ 275.171809][ T5795] team0: Port device team_slave_1 added [ 275.356890][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.364356][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.391008][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.408510][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.418149][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.444675][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.468065][ T5801] team0: Port device team_slave_0 added [ 275.612141][ T5801] team0: Port device team_slave_1 added [ 275.626784][ T5794] team0: Port device team_slave_0 added [ 275.637755][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.645227][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.671659][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.686370][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.693828][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.720764][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.805985][ T5794] team0: Port device team_slave_1 added [ 275.816683][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.824097][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.850589][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.865390][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.872837][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.899523][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.077341][ T5797] hsr_slave_0: entered promiscuous mode [ 276.089569][ T5797] hsr_slave_1: entered promiscuous mode [ 276.104425][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.111755][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.138286][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.240526][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.247725][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.275029][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.289371][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.296888][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.324375][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.465474][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.473008][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.499500][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.530933][ T5808] Bluetooth: hci0: command tx timeout [ 276.561907][ T5793] hsr_slave_0: entered promiscuous mode [ 276.572126][ T5793] hsr_slave_1: entered promiscuous mode [ 276.583231][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.591289][ T5793] Cannot create hsr debugfs directory [ 276.610923][ T5795] hsr_slave_0: entered promiscuous mode [ 276.613561][ T5808] Bluetooth: hci3: command tx timeout [ 276.620987][ T52] Bluetooth: hci4: command tx timeout [ 276.622872][ T5808] Bluetooth: hci2: command tx timeout [ 276.627973][ T5805] Bluetooth: hci1: command tx timeout [ 276.641352][ T5795] hsr_slave_1: entered promiscuous mode [ 276.649894][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.657813][ T5795] Cannot create hsr debugfs directory [ 276.958210][ T5801] hsr_slave_0: entered promiscuous mode [ 276.971025][ T5801] hsr_slave_1: entered promiscuous mode [ 276.979600][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.987742][ T5801] Cannot create hsr debugfs directory [ 277.317225][ T5794] hsr_slave_0: entered promiscuous mode [ 277.328609][ T5794] hsr_slave_1: entered promiscuous mode [ 277.338475][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.346428][ T5794] Cannot create hsr debugfs directory [ 278.467611][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.507886][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.557267][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.578305][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.602428][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.612223][ T5805] Bluetooth: hci0: command tx timeout [ 278.633056][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.655243][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.690834][ T5805] Bluetooth: hci1: command tx timeout [ 278.696678][ T5796] Bluetooth: hci4: command tx timeout [ 278.702582][ T5796] Bluetooth: hci2: command tx timeout [ 278.708247][ T5796] Bluetooth: hci3: command tx timeout [ 278.765040][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.829035][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.869159][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.970903][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.109133][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.155241][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.179985][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.212960][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.241085][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.301673][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.331556][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.372288][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.421076][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.410288][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.443576][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.708923][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.790116][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.878475][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.907567][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.944446][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.970327][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.978247][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.063438][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.102162][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.110060][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.126986][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.134884][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.150793][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.158419][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.174483][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.182227][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.389006][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.396925][ T3896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.450179][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.574620][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.716144][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.753794][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.761671][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.864305][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.872156][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.888765][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.897065][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.914161][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.922055][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.074410][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.376006][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.422901][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.486601][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.969964][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.045925][ T5797] veth0_vlan: entered promiscuous mode [ 285.179684][ T5793] veth0_vlan: entered promiscuous mode [ 285.274248][ T5797] veth1_vlan: entered promiscuous mode [ 285.307629][ T5795] veth0_vlan: entered promiscuous mode [ 285.326622][ T5793] veth1_vlan: entered promiscuous mode [ 285.518466][ T5795] veth1_vlan: entered promiscuous mode [ 285.803231][ T5797] veth0_macvtap: entered promiscuous mode [ 285.816524][ T5793] veth0_macvtap: entered promiscuous mode [ 285.887593][ T5794] veth0_vlan: entered promiscuous mode [ 285.919625][ T5793] veth1_macvtap: entered promiscuous mode [ 285.980839][ T5797] veth1_macvtap: entered promiscuous mode [ 286.080818][ T5795] veth0_macvtap: entered promiscuous mode [ 286.167438][ T5794] veth1_vlan: entered promiscuous mode [ 286.187580][ T5795] veth1_macvtap: entered promiscuous mode [ 286.226084][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.354072][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.366060][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.386840][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.410325][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.506761][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.516056][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.525324][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.534624][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.559575][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.572043][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.582579][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.593475][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.609209][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.699189][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.710308][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.727359][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.756343][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.768521][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.779793][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.791531][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.806907][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.868999][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.878809][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.888151][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.897530][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.938266][ T5794] veth0_macvtap: entered promiscuous mode [ 286.965133][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.976224][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.987520][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.996850][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.109016][ T5794] veth1_macvtap: entered promiscuous mode [ 287.375193][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.386102][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.398125][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.410120][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.422237][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.434474][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.450061][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.618830][ T5801] veth0_vlan: entered promiscuous mode [ 287.746776][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.759245][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.770496][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.781429][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.791679][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.802554][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.822458][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.839831][ T5801] veth1_vlan: entered promiscuous mode [ 288.095996][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.105475][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.114826][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.124183][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.269191][ T5801] veth0_macvtap: entered promiscuous mode [ 288.353552][ T5801] veth1_macvtap: entered promiscuous mode [ 288.575414][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.586444][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.596819][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.607662][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.620716][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.632588][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.642995][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.654535][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.670671][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.768616][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.783299][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.794555][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.805387][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.815591][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.826502][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.836692][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.847537][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.867417][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.986059][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.996852][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.007773][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.018249][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.799347][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.808074][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.187754][ T4045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.196247][ T4045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.428862][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.438178][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.744704][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 294.814733][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.823138][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.069588][ T3829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.078455][ T3829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.282136][ T4045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.290292][ T4045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.607909][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.617155][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.053334][ T52] Bluetooth: Unknown LE signaling command 0xff [ 296.060186][ T52] Bluetooth: Wrong link type (-22) [ 296.117891][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.126500][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.367633][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.376049][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.396834][ T5983] loop2: detected capacity change from 0 to 128 [ 296.529179][ T5983] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.745417][ T5983] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.789322][ T4045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.798550][ T4045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.964459][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.972835][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.283185][ T5983] syz.2.6 (pid 5983) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 297.343157][ T5983] EXT4-fs (loop2): shut down requested (1) [ 297.373008][ T5983] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 297.659884][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 297.763523][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.808668][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.758260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 300.014068][ T52] Bluetooth: hci3: command tx timeout [ 300.457017][ T6012] loop2: detected capacity change from 0 to 2048 [ 300.530985][ T6012] EXT4-fs: Ignoring removed nobh option [ 300.537112][ T6012] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.806780][ T6012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.830703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 301.854578][ T6012] kvm: user requested TSC rate below hardware speed [ 302.240713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 302.547913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 303.093923][ T5987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 303.151588][ T5987] EXT4-fs (loop2): Remounting filesystem read-only [ 303.758922][ T52] Bluetooth: Unknown LE signaling command 0xff [ 303.765707][ T52] Bluetooth: Wrong link type (-22) [ 304.210296][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.239436][ T52] Bluetooth: Unknown LE signaling command 0xff [ 304.246341][ T52] Bluetooth: Wrong link type (-22) [ 304.802394][ T6041] Zero length message leads to an empty skb [ 304.912002][ T6041] netlink: 'syz.4.19': attribute type 12 has an invalid length. [ 306.745843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.747591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.954782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 307.052056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 307.186177][ T52] Bluetooth: hci2: command tx timeout [ 307.361203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 307.462286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 312.106885][ T6086] loop0: detected capacity change from 0 to 2048 [ 312.142015][ T6086] EXT4-fs: Ignoring removed nobh option [ 312.148180][ T6086] EXT4-fs: Ignoring removed mblk_io_submit option [ 312.775889][ T52] Bluetooth: Unknown LE signaling command 0xff [ 312.782653][ T52] Bluetooth: Wrong link type (-22) [ 313.217602][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.842387][ T6084] kvm: user requested TSC rate below hardware speed [ 313.855122][ T6084] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 314.991782][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.638846][ T52] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 319.421625][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.596397][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 319.605693][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 319.614799][ T6157] nbd: socks must be embedded in a SOCK_ITEM attr [ 320.358033][ T6175] 9pnet_fd: Insufficient options for proto=fd [ 322.008409][ T52] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 322.658338][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 322.667927][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 322.677245][ T6202] nbd: socks must be embedded in a SOCK_ITEM attr [ 325.129077][ T6222] 9pnet_fd: Insufficient options for proto=fd [ 325.912560][ T2222] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 326.221619][ T2222] usb 4-1: Using ep0 maxpacket: 16 [ 326.245125][ T2222] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 326.254209][ T2222] usb 4-1: config 0 has no interface number 0 [ 326.260883][ T2222] usb 4-1: config 0 interface 1 has no altsetting 0 [ 326.290007][ T2222] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 326.304976][ T2222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.315104][ T2222] usb 4-1: Product: syz [ 326.319957][ T2222] usb 4-1: Manufacturer: syz [ 326.325222][ T2222] usb 4-1: SerialNumber: syz [ 326.455590][ T2222] usb 4-1: config 0 descriptor?? [ 326.928157][ T2222] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 327.024233][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 327.979529][ T2222] gspca_spca1528: reg_w err -71 [ 328.001095][ T2222] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 328.022248][ T2222] usb 4-1: USB disconnect, device number 2 [ 330.619882][ T5848] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 330.629476][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.638305][ T5848] usb 2-1: Product: syz [ 330.816574][ T5848] usb 2-1: config 0 descriptor?? [ 330.827015][ T5848] usb 2-1: can't set config #0, error -71 [ 330.843949][ T5848] usb 2-1: USB disconnect, device number 2 [ 331.926163][ T6266] 9pnet_fd: Insufficient options for proto=fd [ 332.540543][ T52] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 332.845397][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.951549][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.965940][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.979282][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.990894][ T5796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.001026][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.614557][ T5796] Bluetooth: hci3: command tx timeout [ 335.092789][ T5796] Bluetooth: hci5: command tx timeout [ 336.797286][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 337.172405][ T5796] Bluetooth: hci5: command tx timeout [ 337.930830][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 337.939905][ T6309] bridge_slave_1: left allmulticast mode [ 337.946240][ T6309] bridge_slave_1: left promiscuous mode [ 337.953345][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.231430][ T6309] bridge_slave_0: left allmulticast mode [ 338.237413][ T6309] bridge_slave_0: left promiscuous mode [ 338.244674][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.380822][ T5796] Bluetooth: hci5: command tx timeout [ 340.004815][ T5796] Bluetooth: Unknown LE signaling command 0xff [ 340.012531][ T5796] Bluetooth: Wrong link type (-22) [ 340.134158][ T6329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.225210][ T6329] batadv_slave_0: entered promiscuous mode [ 340.409546][ T5796] Bluetooth: hci1: command tx timeout [ 341.184171][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.192416][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.200788][ T6270] bridge_slave_0: entered allmulticast mode [ 341.210584][ T6270] bridge_slave_0: entered promiscuous mode [ 341.423595][ T5796] Bluetooth: hci5: command tx timeout [ 341.575013][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.583232][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.591522][ T6270] bridge_slave_1: entered allmulticast mode [ 341.601254][ T6270] bridge_slave_1: entered promiscuous mode [ 342.673093][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.986091][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.479158][ T6270] team0: Port device team_slave_0 added [ 346.413521][ T6270] team0: Port device team_slave_1 added [ 347.416345][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.423848][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.450561][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.535908][ T5796] Bluetooth: Unknown LE signaling command 0xff [ 347.542595][ T5796] Bluetooth: Wrong link type (-22) [ 348.617305][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.630125][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.658970][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.700091][ T5796] Bluetooth: hci0: command tx timeout [ 349.629866][ T6270] hsr_slave_0: entered promiscuous mode [ 349.732260][ T6270] hsr_slave_1: entered promiscuous mode [ 349.798233][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.806983][ T6270] Cannot create hsr debugfs directory [ 353.507625][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.514711][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.620022][ T6270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.900319][ T6270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.941216][ T6270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.999070][ T6270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.904143][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.959876][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.107700][ T6270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.118844][ T6270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.179308][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.187262][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.211262][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.219209][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.776427][ T52] Bluetooth: Unknown LE signaling command 0xff [ 356.783325][ T52] Bluetooth: Wrong link type (-22) [ 358.706556][ T52] Bluetooth: Unknown LE signaling command 0xff [ 358.713423][ T52] Bluetooth: Wrong link type (-22) [ 358.721543][ T52] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 361.532271][ T5796] Bluetooth: hci1: command tx timeout [ 362.090988][ T52] Bluetooth: Unknown LE signaling command 0xff [ 362.097663][ T52] Bluetooth: Wrong link type (-22) [ 362.112613][ T52] Bluetooth: hci0: link tx timeout [ 362.118062][ T52] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 362.731682][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.141371][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 365.202828][ T52] Bluetooth: Unknown LE signaling command 0xff [ 365.209564][ T52] Bluetooth: Wrong link type (-22) [ 366.561677][ T6486] netlink: 100 bytes leftover after parsing attributes in process `syz.2.155'. [ 366.571359][ T6486] nbd: must specify at least one socket [ 367.781620][ T52] Bluetooth: hci2: command tx timeout [ 369.360906][ T6495] mmap: syz.1.156 (6495) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 373.212366][ T6511] Invalid ELF header len 1 [ 374.960621][ T6270] veth0_vlan: entered promiscuous mode [ 375.778542][ T5796] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 375.885416][ T6270] veth1_vlan: entered promiscuous mode [ 376.153764][ T5796] Bluetooth: Unknown LE signaling command 0xff [ 376.160786][ T5796] Bluetooth: Wrong link type (-22) [ 376.869600][ T6270] veth0_macvtap: entered promiscuous mode [ 376.936719][ T6270] veth1_macvtap: entered promiscuous mode [ 377.623926][ T6528] netlink: 100 bytes leftover after parsing attributes in process `syz.3.166'. [ 377.633946][ T6528] nbd: must specify at least one socket [ 377.645447][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.656594][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.666926][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.678425][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.688681][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.699691][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.713965][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.726267][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.740662][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.859353][ T5796] Bluetooth: hci1: command tx timeout [ 381.502879][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.513950][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.524243][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.535100][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.545343][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.556232][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.566690][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.577863][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.588252][ T6270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.604800][ T6270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.622055][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.751810][ T6270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.761351][ T6270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.770863][ T6270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.779964][ T6270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.584019][ T5796] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 385.241327][ T5796] Bluetooth: Unknown LE signaling command 0xff [ 385.247858][ T5796] Bluetooth: Wrong link type (-22) [ 385.253762][ T5796] Bluetooth: hci2: link tx timeout [ 385.259035][ T5796] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 385.267756][ T5796] Bluetooth: hci2: link tx timeout [ 385.273215][ T5796] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 386.226398][ T6569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.180'. [ 386.236006][ T6569] nbd: must specify at least one socket [ 386.610958][ T52] Bluetooth: hci3: command tx timeout [ 387.380682][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 389.863031][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 398.851630][ T6125] sched: DL replenish lagged too much [ 399.284315][ T5805] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 405.415549][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 405.422045][ T52] Bluetooth: hci1: command tx timeout [ 405.427698][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 406.722386][ T5796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.871990][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.883930][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.904060][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.916372][ T5808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 406.927042][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.466727][ T6496] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.496912][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 407.785762][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 407.826187][ T6496] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.848988][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 407.941449][ T8] usb 4-1: device descriptor read/64, error -71 [ 408.071699][ T5848] usb 2-1: config 0 has an invalid interface number: 194 but max is 0 [ 408.080249][ T5848] usb 2-1: config 0 has no interface number 0 [ 408.122936][ T6496] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.174377][ T5848] usb 2-1: New USB device found, idVendor=0733, idProduct=1311, bcdDevice=78.a3 [ 408.185122][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.194707][ T5848] usb 2-1: Product: syz [ 408.199171][ T5848] usb 2-1: Manufacturer: syz [ 408.202261][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 408.205036][ T5848] usb 2-1: SerialNumber: syz [ 408.316825][ T6496] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.359001][ T5848] usb 2-1: config 0 descriptor?? [ 408.392372][ T5848] gspca_main: sunplus-2.14.0 probing 0733:1311 [ 408.393423][ T8] usb 4-1: device descriptor read/64, error -71 [ 408.531952][ T8] usb usb4-port1: attempt power cycle [ 408.682584][ T5848] gspca_sunplus: reg_r err -71 [ 408.688022][ T5848] sunplus 2-1:0.194: probe with driver sunplus failed with error -71 [ 408.760111][ T5848] usb 2-1: USB disconnect, device number 3 [ 408.934875][ T6496] bridge_slave_1: left allmulticast mode [ 408.945523][ T6496] bridge_slave_1: left promiscuous mode [ 408.952405][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.997440][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 409.063773][ T8] usb 4-1: device descriptor read/8, error -71 [ 409.072646][ T5808] Bluetooth: hci6: command tx timeout [ 409.159041][ T6496] bridge_slave_0: left allmulticast mode [ 409.165201][ T6496] bridge_slave_0: left promiscuous mode [ 409.171881][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.622368][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 412.636859][ T5808] Bluetooth: hci6: command tx timeout [ 412.837669][ T8] usb 4-1: device descriptor read/8, error -71 [ 413.052584][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.500112][ T8] usb usb4-port1: unable to enumerate USB device [ 413.782592][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.789357][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.876539][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 414.071397][ T6644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 414.217970][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.289648][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 414.300295][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.391554][ T6496] bond0 (unregistering): Released all slaves [ 414.460983][ T10] usb 2-1: config 0 descriptor?? [ 414.693071][ T52] Bluetooth: hci6: command tx timeout [ 415.813366][ T10] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0f [ 415.821124][ T10] hackrf 2-1:0.0: Could not detect board [ 415.827117][ T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -110 [ 416.195473][ T6641] capability: warning: `syz.1.199' uses 32-bit capabilities (legacy support in use) [ 416.471134][ T6496] hsr_slave_0: left promiscuous mode [ 416.531804][ T6496] hsr_slave_1: left promiscuous mode [ 416.575696][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.584260][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.674259][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.683054][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.772951][ T52] Bluetooth: hci6: command tx timeout [ 416.874908][ T6650] capability: warning: `syz.1.199' uses deprecated v2 capabilities in a way that may be insecure [ 416.887670][ T6496] veth1_macvtap: left promiscuous mode [ 416.893839][ T6496] veth0_macvtap: left promiscuous mode [ 416.899968][ T6496] veth1_vlan: left promiscuous mode [ 416.906053][ T6496] veth0_vlan: left promiscuous mode [ 420.877417][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 420.987292][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 421.743821][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 422.003509][ T10] usb 2-1: USB disconnect, device number 4 [ 422.607800][ T6674] netlink: 72 bytes leftover after parsing attributes in process `syz.3.208'. [ 422.617310][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'. [ 423.976736][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.985943][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.998843][ T6609] bridge_slave_0: entered allmulticast mode [ 424.008600][ T6609] bridge_slave_0: entered promiscuous mode [ 424.155284][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.165441][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.173666][ T6609] bridge_slave_1: entered allmulticast mode [ 424.183356][ T6609] bridge_slave_1: entered promiscuous mode [ 424.594188][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 424.836668][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.903088][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.444311][ T6609] team0: Port device team_slave_0 added [ 425.591718][ T6609] team0: Port device team_slave_1 added [ 426.292851][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.300280][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.327176][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.358749][ T5848] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 426.420058][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.427618][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.462006][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.561264][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 426.634825][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.645465][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.661254][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 426.674945][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 426.686575][ T5848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 426.697390][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 426.707545][ T5848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 426.717871][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 426.944834][ T5848] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 426.954564][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.967552][ T5848] usb 4-1: Product: syz [ 426.973526][ T5848] usb 4-1: Manufacturer: syz [ 426.978459][ T5848] usb 4-1: SerialNumber: syz [ 427.019496][ T5848] usb 4-1: config 0 descriptor?? [ 427.029179][ T6697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.078238][ T6609] hsr_slave_0: entered promiscuous mode [ 427.210022][ T6609] hsr_slave_1: entered promiscuous mode [ 427.294282][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.302363][ T6609] Cannot create hsr debugfs directory [ 427.422698][ T5848] cxacru 4-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 427.430993][ T5848] cxacru 4-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 427.439123][ T5848] cxacru 4-1:0.0: probe with driver cxacru failed with error -22 [ 427.596793][ T5848] usb 4-1: USB disconnect, device number 7 [ 435.504096][ T4045] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.948227][ T4045] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.418254][ T4045] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.683201][ T4045] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.461072][ T6609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.487378][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.553428][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.563155][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.577073][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.588967][ T5808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 437.682446][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.858698][ T4045] bridge_slave_1: left allmulticast mode [ 437.864989][ T4045] bridge_slave_1: left promiscuous mode [ 437.872120][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.037696][ T4045] bridge_slave_0: left allmulticast mode [ 438.045185][ T4045] bridge_slave_0: left promiscuous mode [ 438.052249][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.423100][ T4045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.782276][ T4045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.837818][ T4045] bond0 (unregistering): Released all slaves [ 440.082007][ T5808] Bluetooth: hci4: command tx timeout [ 440.497609][ T6609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.969181][ T6609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 441.616845][ T6609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 441.903602][ T4045] hsr_slave_0: left promiscuous mode [ 442.006479][ T4045] hsr_slave_1: left promiscuous mode [ 442.091604][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.099445][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.156706][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.166902][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.178038][ T5808] Bluetooth: hci4: command tx timeout [ 442.366972][ T4045] veth1_macvtap: left promiscuous mode [ 442.373155][ T4045] veth0_macvtap: left promiscuous mode [ 442.379306][ T4045] veth1_vlan: left promiscuous mode [ 442.385434][ T4045] veth0_vlan: left promiscuous mode [ 442.625401][ T5848] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 443.053016][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.064926][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 443.075467][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.295730][ T5848] usb 4-1: config 0 descriptor?? [ 443.375488][ T4045] team0 (unregistering): Port device team_slave_1 removed [ 443.405413][ T5848] pwc: Askey VC010 type 2 USB webcam detected. [ 443.449053][ T4045] team0 (unregistering): Port device team_slave_0 removed [ 443.806855][ T5848] pwc: send_video_command error -71 [ 443.812736][ T5848] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 443.821520][ T5848] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 443.848372][ T5848] usb 4-1: USB disconnect, device number 8 [ 444.244528][ T5808] Bluetooth: hci4: command tx timeout [ 444.852015][ T5848] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 444.929677][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.066729][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.077554][ T5848] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 445.090870][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.176822][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.250734][ T5848] usb 4-1: config 0 descriptor?? [ 445.488093][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.496160][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.532279][ T5848] usb 4-1: can't set config #0, error -71 [ 445.932046][ T6793] netlink: 188 bytes leftover after parsing attributes in process `syz.1.240'. [ 446.187511][ T4045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.311393][ T5808] Bluetooth: hci4: command tx timeout [ 446.351276][ T5848] usb 4-1: USB disconnect, device number 9 [ 446.407773][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.415816][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.009896][ T4045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.772407][ T4045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.003158][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 451.090038][ T52] Bluetooth: Unknown LE signaling command 0xff [ 451.097444][ T52] Bluetooth: Wrong link type (-22) [ 451.167478][ T4045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.887899][ T6825] overlayfs: failed to resolve './file1': -2 [ 452.985572][ T4045] bridge_slave_1: left allmulticast mode [ 452.992067][ T4045] bridge_slave_1: left promiscuous mode [ 452.998846][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.314826][ T4045] bridge_slave_0: left allmulticast mode [ 453.321163][ T4045] bridge_slave_0: left promiscuous mode [ 453.328440][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.408073][ T4045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.445770][ T4045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.579802][ T4045] bond0 (unregistering): Released all slaves [ 454.766329][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.168317][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 456.224237][ T4045] hsr_slave_0: left promiscuous mode [ 456.238888][ T4045] hsr_slave_1: left promiscuous mode [ 456.270253][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.278268][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.397313][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.405443][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.439832][ T4045] veth1_macvtap: left promiscuous mode [ 456.445896][ T4045] veth0_macvtap: left promiscuous mode [ 456.454786][ T4045] veth1_vlan: left promiscuous mode [ 456.460938][ T4045] veth0_vlan: left promiscuous mode [ 458.039795][ T4045] team0 (unregistering): Port device team_slave_1 removed [ 458.098135][ T4045] team0 (unregistering): Port device team_slave_0 removed [ 459.227258][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.238001][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.246294][ T6741] bridge_slave_0: entered allmulticast mode [ 459.396118][ T6741] bridge_slave_0: entered promiscuous mode [ 459.563471][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.571590][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.579487][ T6741] bridge_slave_1: entered allmulticast mode [ 459.591958][ T6741] bridge_slave_1: entered promiscuous mode [ 459.987514][ T52] Bluetooth: Unknown LE signaling command 0xff [ 459.994356][ T52] Bluetooth: Wrong link type (-22) [ 460.061271][ T6874] CIFS: VFS: Malformed UNC in devname [ 460.613738][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.889587][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.133144][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.204967][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.241008][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.263943][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.287963][ T5808] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 463.299311][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.260135][ T6898] netlink: 'syz.1.258': attribute type 7 has an invalid length. [ 464.268312][ T6898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.258'. [ 464.284103][ T6898] netlink: 'syz.1.258': attribute type 3 has an invalid length. [ 464.292263][ T6898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.258'. [ 464.593843][ T6741] team0: Port device team_slave_0 added [ 464.889938][ T6741] team0: Port device team_slave_1 added [ 465.457844][ T5808] Bluetooth: hci2: command tx timeout [ 465.728499][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.736034][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.762728][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.239787][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.247452][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.275158][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.395646][ T6914] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.261'. [ 467.494319][ T5808] Bluetooth: hci2: command tx timeout [ 467.655079][ T6741] hsr_slave_0: entered promiscuous mode [ 467.759921][ T6741] hsr_slave_1: entered promiscuous mode [ 467.781311][ T6741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.789205][ T6741] Cannot create hsr debugfs directory [ 468.011522][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 469.228231][ T5808] Bluetooth: Unknown LE signaling command 0xff [ 469.235292][ T5808] Bluetooth: Wrong link type (-22) [ 469.712902][ T5808] Bluetooth: hci2: command tx timeout [ 472.097630][ T5808] Bluetooth: hci2: command tx timeout [ 472.235662][ T3526] bridge_slave_1: left allmulticast mode [ 472.241940][ T3526] bridge_slave_1: left promiscuous mode [ 472.249944][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.894553][ T3526] bridge_slave_0: left allmulticast mode [ 472.900858][ T3526] bridge_slave_0: left promiscuous mode [ 472.907779][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.490918][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.735314][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.811599][ T3526] bond0 (unregistering): Released all slaves [ 474.741002][ T3526] hsr_slave_0: left promiscuous mode [ 474.816093][ T3526] hsr_slave_1: left promiscuous mode [ 474.871289][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.934950][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.125109][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.132176][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.395621][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 476.587085][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 477.159583][ T6741] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.481409][ T6741] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.761598][ T6741] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.945862][ T6973] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.273'. [ 477.948849][ T6741] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.267409][ T1854] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 478.433393][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.445656][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.456216][ T6889] bridge_slave_0: entered allmulticast mode [ 478.476730][ T6889] bridge_slave_0: entered promiscuous mode [ 478.494265][ T1854] usb 4-1: Using ep0 maxpacket: 16 [ 478.543812][ T1854] usb 4-1: config 0 has no interfaces? [ 478.549679][ T1854] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.560454][ T1854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.653669][ T1854] usb 4-1: config 0 descriptor?? [ 478.677436][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.685465][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.693586][ T6889] bridge_slave_1: entered allmulticast mode [ 478.703693][ T6889] bridge_slave_1: entered promiscuous mode [ 478.890236][ T1854] usb 4-1: USB disconnect, device number 10 [ 479.019460][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.173927][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.327006][ T52] Bluetooth: Unknown LE signaling command 0xff [ 479.333649][ T52] Bluetooth: Wrong link type (-22) [ 479.339350][ T52] Bluetooth: hci0: link tx timeout [ 479.345177][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 479.457429][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.481481][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.489323][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.510820][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.518636][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.573638][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.807673][ T52] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 479.916786][ T6889] team0: Port device team_slave_0 added [ 480.035033][ T6889] team0: Port device team_slave_1 added [ 480.591819][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.599149][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.630860][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.800208][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.807746][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.839415][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.442511][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 482.432375][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 483.046587][ T6889] hsr_slave_0: entered promiscuous mode [ 483.102628][ T6889] hsr_slave_1: entered promiscuous mode [ 483.206032][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.214358][ T6889] Cannot create hsr debugfs directory [ 485.025048][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.060563][ T7019] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.283'. [ 486.470273][ T5808] Bluetooth: hci1: command tx timeout [ 486.855862][ T5808] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 488.280678][ T6889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 488.736661][ T6889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 488.930932][ T5808] Bluetooth: hci1: command tx timeout [ 489.181971][ T6889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 489.442710][ T6889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.791928][ T7063] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 492.071857][ T6741] veth0_vlan: entered promiscuous mode [ 492.515075][ T6741] veth1_vlan: entered promiscuous mode [ 493.023320][ T7073] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.297'. [ 493.446070][ T6741] veth0_macvtap: entered promiscuous mode [ 493.635119][ T6741] veth1_macvtap: entered promiscuous mode [ 494.055808][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.066856][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.077691][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.088710][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.104895][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.447107][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.458162][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.469184][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.480578][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.491015][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.501895][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.524973][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.604810][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.633160][ T5808] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 494.680049][ T6741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.689454][ T6741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.698975][ T6741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.708575][ T6741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.863129][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.964199][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.972154][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.270746][ T6889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.281659][ T6889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.351421][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.359210][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.999868][ T5808] Bluetooth: hci1: command tx timeout [ 499.065234][ T7106] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 499.858809][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.895989][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.906392][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 500.309765][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.333557][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 500.349823][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 500.390983][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.087010][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.397059][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.582195][ T52] Bluetooth: hci5: command tx timeout [ 508.661881][ T52] Bluetooth: hci5: command tx timeout [ 509.057640][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.250616][ T52] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 509.735413][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.917038][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 510.710624][ T52] Bluetooth: hci5: command tx timeout [ 511.091218][ T13] bridge_slave_1: left allmulticast mode [ 511.097328][ T13] bridge_slave_1: left promiscuous mode [ 511.104500][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.223067][ T13] bridge_slave_0: left allmulticast mode [ 511.229068][ T13] bridge_slave_0: left promiscuous mode [ 511.242600][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.331181][ T52] Bluetooth: hci1: command tx timeout [ 511.827141][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 511.838042][ T7171] nbd: socks must be embedded in a SOCK_ITEM attr [ 512.125926][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.209251][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.255075][ T13] bond0 (unregistering): Released all slaves [ 512.749242][ T6889] veth0_vlan: entered promiscuous mode [ 512.793402][ T6889] veth1_vlan: entered promiscuous mode [ 512.824687][ T52] Bluetooth: hci5: command tx timeout [ 513.132662][ T13] hsr_slave_0: left promiscuous mode [ 513.366092][ T13] hsr_slave_1: left promiscuous mode [ 513.593060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.601011][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.613501][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.621973][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.720916][ T13] veth1_macvtap: left promiscuous mode [ 513.726770][ T13] veth0_macvtap: left promiscuous mode [ 513.733039][ T13] veth1_vlan: left promiscuous mode [ 513.738770][ T13] veth0_vlan: left promiscuous mode [ 514.321323][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 514.804299][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 515.064548][ T5808] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 515.292839][ T10] usb 3-1: config index 0 descriptor too short (expected 65307, got 27) [ 515.302930][ T10] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 515.312506][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.323165][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 517.154457][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 517.375850][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 517.389703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.400458][ T10] usb 3-1: Product: syz [ 517.405109][ T10] usb 3-1: Manufacturer: syz [ 517.415558][ T13] team0 (unregistering): Port device team_slave_1 removed [ 517.463574][ T10] usb 3-1: config 0 descriptor?? [ 517.504865][ T10] usb 3-1: can't set config #0, error -71 [ 517.543476][ T13] team0 (unregistering): Port device team_slave_0 removed [ 517.674450][ T10] usb 3-1: USB disconnect, device number 2 [ 518.422200][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.430124][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.438377][ T7118] bridge_slave_0: entered allmulticast mode [ 518.448422][ T7118] bridge_slave_0: entered promiscuous mode [ 518.603077][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.614090][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.622957][ T7118] bridge_slave_1: entered allmulticast mode [ 518.632584][ T7118] bridge_slave_1: entered promiscuous mode [ 519.578709][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.784839][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.876390][ T6889] veth0_macvtap: entered promiscuous mode [ 520.063877][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 520.073362][ T7223] nbd: socks must be embedded in a SOCK_ITEM attr [ 520.191585][ T7118] team0: Port device team_slave_0 added [ 520.369748][ T7118] team0: Port device team_slave_1 added [ 520.897369][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.905667][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.933808][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.025784][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.133357][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.140878][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.167213][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.180505][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.282704][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.300909][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.330680][ T52] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 521.410139][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.452423][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 521.466733][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.875694][ T7118] hsr_slave_0: entered promiscuous mode [ 521.997308][ T7118] hsr_slave_1: entered promiscuous mode [ 522.071779][ T7118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.079769][ T7118] Cannot create hsr debugfs directory [ 522.232404][ T7244] Bluetooth: MGMT ver 1.23 [ 523.332908][ T52] Bluetooth: hci1: command tx timeout [ 523.574032][ T52] Bluetooth: hci4: command tx timeout [ 523.964703][ T7263] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 524.616126][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 525.063394][ T6496] bridge_slave_1: left allmulticast mode [ 525.069375][ T6496] bridge_slave_1: left promiscuous mode [ 525.076536][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.115491][ T6496] bridge_slave_0: left allmulticast mode [ 525.122749][ T6496] bridge_slave_0: left promiscuous mode [ 525.129525][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.459826][ T52] Bluetooth: hci3: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 525.651825][ T52] Bluetooth: hci4: command tx timeout [ 526.253292][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.313084][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.346984][ T6496] bond0 (unregistering): Released all slaves [ 526.421768][ T7118] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.541016][ T7118] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 526.634383][ T7118] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 526.795706][ T6496] hsr_slave_0: left promiscuous mode [ 526.843884][ T6496] hsr_slave_1: left promiscuous mode [ 526.917780][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.949778][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.998589][ T6496] veth0_macvtap: left promiscuous mode [ 527.008408][ T6496] veth1_vlan: left promiscuous mode [ 527.014154][ T6496] veth0_vlan: left promiscuous mode [ 527.525573][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 527.734403][ T52] Bluetooth: hci4: command tx timeout [ 528.146577][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 528.200970][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 528.842617][ T7118] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 529.812897][ T52] Bluetooth: hci4: command tx timeout [ 530.106461][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 530.224628][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.232458][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.240096][ T7230] bridge_slave_0: entered allmulticast mode [ 530.248819][ T7230] bridge_slave_0: entered promiscuous mode [ 530.381345][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.404668][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.412387][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.420092][ T7230] bridge_slave_1: entered allmulticast mode [ 530.428718][ T7230] bridge_slave_1: entered promiscuous mode [ 530.571771][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.737910][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.824943][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.832905][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.904501][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.912421][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.981762][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.173106][ T52] Bluetooth: hci1: Ignoring HCI_Sync_Conn_Complete event for existing connection [ 531.355293][ T7230] team0: Port device team_slave_0 added [ 531.516895][ T7230] team0: Port device team_slave_1 added [ 531.706072][ T7327] dlm: plock device version mismatch: kernel (1.2.0), user (1.65552.0) [ 531.784514][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.791851][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.821734][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.870905][ T7118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.075439][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.083395][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.112013][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.773366][ T7230] hsr_slave_0: entered promiscuous mode [ 532.862697][ T7230] hsr_slave_1: entered promiscuous mode [ 532.911058][ T7230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.919028][ T7230] Cannot create hsr debugfs directory [ 533.261574][ T52] Bluetooth: hci1: command tx timeout [ 533.773993][ T7342] ===================================================== [ 533.781478][ T7342] BUG: KMSAN: uninit-value in ___bpf_prog_run+0x94d5/0xe0f0 [ 533.789074][ T7342] ___bpf_prog_run+0x94d5/0xe0f0 [ 533.794553][ T7342] __bpf_prog_run32+0xc2/0xf0 [ 533.799541][ T7342] __ppp_xmit_process+0x501/0x2840 [ 533.805154][ T7342] ppp_xmit_process+0x100/0x2b0 [ 533.810474][ T7342] ppp_write+0x71d/0x910 [ 533.814935][ T7342] vfs_write+0x48a/0x1540 [ 533.819510][ T7342] ksys_write+0x24f/0x4c0 [ 533.824338][ T7342] __x64_sys_write+0x93/0xe0 [ 533.829247][ T7342] x64_sys_call+0x306a/0x3ba0 [ 533.834371][ T7342] do_syscall_64+0xcd/0x1e0 [ 533.839293][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.845675][ T7342] [ 533.848151][ T7342] Uninit was stored to memory at: [ 533.853647][ T7342] ___bpf_prog_run+0x98e7/0xe0f0 [ 533.858867][ T7342] __bpf_prog_run32+0xc2/0xf0 [ 533.863958][ T7342] __ppp_xmit_process+0x501/0x2840 [ 533.869394][ T7342] ppp_xmit_process+0x100/0x2b0 [ 533.874689][ T7342] ppp_write+0x71d/0x910 [ 533.879159][ T7342] vfs_write+0x48a/0x1540 [ 533.883866][ T7342] ksys_write+0x24f/0x4c0 [ 533.888458][ T7342] __x64_sys_write+0x93/0xe0 [ 533.893484][ T7342] x64_sys_call+0x306a/0x3ba0 [ 533.898450][ T7342] do_syscall_64+0xcd/0x1e0 [ 533.903384][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.909574][ T7342] [ 533.912159][ T7342] Uninit was created at: [ 533.916927][ T7342] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 533.923252][ T7342] kmalloc_reserve+0x13d/0x4a0 [ 533.928279][ T7342] __alloc_skb+0x363/0x7b0 [ 533.933167][ T7342] ppp_write+0xdf/0x910 [ 533.937625][ T7342] vfs_write+0x48a/0x1540 [ 533.942379][ T7342] ksys_write+0x24f/0x4c0 [ 533.946956][ T7342] __x64_sys_write+0x93/0xe0 [ 533.951958][ T7342] x64_sys_call+0x306a/0x3ba0 [ 533.956943][ T7342] do_syscall_64+0xcd/0x1e0 [ 533.962029][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.968289][ T7342] [ 533.970898][ T7342] CPU: 1 UID: 0 PID: 7342 Comm: syz.1.356 Not tainted 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 533.981894][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.992302][ T7342] ===================================================== [ 533.999398][ T7342] Disabling lock debugging due to kernel taint [ 534.005925][ T7342] Kernel panic - not syncing: kmsan.panic set ... [ 534.012549][ T7342] CPU: 1 UID: 0 PID: 7342 Comm: syz.1.356 Tainted: G B 6.12.0-rc6-syzkaller-00099-g7758b206117d #0 [ 534.024918][ T7342] Tainted: [B]=BAD_PAGE [ 534.029253][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 534.039633][ T7342] Call Trace: [ 534.043118][ T7342] [ 534.046212][ T7342] dump_stack_lvl+0x216/0x2d0 [ 534.051537][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.057694][ T7342] dump_stack+0x1e/0x30 [ 534.062249][ T7342] panic+0x4e2/0xcf0 [ 534.066471][ T7342] ? kmsan_get_metadata+0x131/0x1c0 [ 534.071940][ T7342] kmsan_report+0x2c7/0x2d0 [ 534.076782][ T7342] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 534.082896][ T7342] ? __msan_warning+0x95/0x120 [ 534.088047][ T7342] ? ___bpf_prog_run+0x94d5/0xe0f0 [ 534.093458][ T7342] ? __bpf_prog_run32+0xc2/0xf0 [ 534.098604][ T7342] ? __ppp_xmit_process+0x501/0x2840 [ 534.104205][ T7342] ? ppp_xmit_process+0x100/0x2b0 [ 534.109472][ T7342] ? ppp_write+0x71d/0x910 [ 534.114120][ T7342] ? vfs_write+0x48a/0x1540 [ 534.118883][ T7342] ? ksys_write+0x24f/0x4c0 [ 534.123659][ T7342] ? __x64_sys_write+0x93/0xe0 [ 534.128692][ T7342] ? x64_sys_call+0x306a/0x3ba0 [ 534.133843][ T7342] ? do_syscall_64+0xcd/0x1e0 [ 534.138822][ T7342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.145168][ T7342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.151519][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.157590][ T7342] ? bpf_skb_load_helper_32+0x40/0x1d0 [ 534.163312][ T7342] ? filter_irq_stacks+0x60/0x1a0 [ 534.168651][ T7342] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.174099][ T7342] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 534.180755][ T7342] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.186239][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.192336][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.198424][ T7342] __msan_warning+0x95/0x120 [ 534.203340][ T7342] ___bpf_prog_run+0x94d5/0xe0f0 [ 534.208616][ T7342] __bpf_prog_run32+0xc2/0xf0 [ 534.213618][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.219718][ T7342] ? __pfx___bpf_prog_run32+0x10/0x10 [ 534.225396][ T7342] __ppp_xmit_process+0x501/0x2840 [ 534.230850][ T7342] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.236304][ T7342] ppp_xmit_process+0x100/0x2b0 [ 534.241394][ T7342] ? ppp_xmit_process+0x2d/0x2b0 [ 534.246587][ T7342] ppp_write+0x71d/0x910 [ 534.251068][ T7342] ? __pfx_ppp_write+0x10/0x10 [ 534.256135][ T7342] vfs_write+0x48a/0x1540 [ 534.260734][ T7342] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.266188][ T7342] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 534.272835][ T7342] ? kmsan_get_metadata+0x13e/0x1c0 [ 534.278295][ T7342] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 534.284367][ T7342] ksys_write+0x24f/0x4c0 [ 534.288993][ T7342] __x64_sys_write+0x93/0xe0 [ 534.294018][ T7342] x64_sys_call+0x306a/0x3ba0 [ 534.298992][ T7342] do_syscall_64+0xcd/0x1e0 [ 534.303824][ T7342] ? clear_bhb_loop+0x25/0x80 [ 534.308779][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.314972][ T7342] RIP: 0033:0x7f792f97e719 [ 534.319688][ T7342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.339753][ T7342] RSP: 002b:00007f7930736038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.348467][ T7342] RAX: ffffffffffffffda RBX: 00007f792fb36058 RCX: 00007f792f97e719 [ 534.356676][ T7342] RDX: 0000000000000002 RSI: 0000000020000480 RDI: 0000000000000006 [ 534.364862][ T7342] RBP: 00007f792f9f139e R08: 0000000000000000 R09: 0000000000000000 [ 534.373112][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.381314][ T7342] R13: 0000000000000000 R14: 00007f792fb36058 R15: 00007ffdc2183358 [ 534.389543][ T7342] [ 534.392967][ T7342] Kernel Offset: disabled [ 534.397430][ T7342] Rebooting in 86400 seconds..